General

  • Target

    b667e4e32ba99a656e5852dada4131c0.bin

  • Size

    7.9MB

  • MD5

    b667e4e32ba99a656e5852dada4131c0

  • SHA1

    c78513093137c68cabac09289845122b2b9343c1

  • SHA256

    410ba8fe30abbfd3037270d094bcafb98a2175236bcee637b6159be617e28b7f

  • SHA512

    830c1196ecbf0807a47bcc169597014ccaccd755edb201c7d3f53ec0336389e1c207a5cb0d02a7ddf65d1148af45c74ea1303ad77a8829974d89d62021b144dd

  • SSDEEP

    98304:NI0NsJLKjF4bK8Qxa811s18jrrTTmOQumOQf2cI2cwfEdKkXf63MYd6/frC/6Sw:NJ/S+w1WTauaf/I/gEUkv63fT6Sw

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • b667e4e32ba99a656e5852dada4131c0.bin
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    Password: infected

    eu.thedarken.sdm

    eu.thedarken.sdm.main.ui.SDMMainActivity


  • db_advertisement_files.json
  • db_analytics_files.json
  • db_bug_reporting_files.json
  • db_clutter_markers.json
  • db_debug_markers.json
  • db_downloaded_game_files.json
  • db_hidden_caches_files.json
  • db_offline_cache_files.json
  • db_trash_files.json
  • db_webcaches.json
  • event.h

Android Permissions

b667e4e32ba99a656e5852dada4131c0.bin

Permissions

android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS

android.permission.READ_MEDIA_STORAGE

android.permission.SCHEDULE_EXACT_ALARM

android.permission.WRITE_MEDIA_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_SUPERUSER

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.GET_PACKAGE_SIZE

android.permission.WAKE_LOCK

android.permission.REQUEST_DELETE_PACKAGES

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.CLEAR_APP_CACHE

android.permission.PACKAGE_USAGE_STATS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES

com.android.vending.BILLING